{"report_id":"94aca790-9c4c-4177-af4c-7c5fdf40587a","version":6,"status":"done","tags":[],"date":"2026-02-22T13:51:39Z","url":{"schema":"http","addr":"wlfionerc.fun","fqdn":"wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.21","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.wlfionerc.fun/","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"title":"Baby World Liberty Financial $WLFI #WLFI #WLFI $WLFI – Baby World Liberty Financial $WLFI #WLFI #WLFI $WLFI","dom":{"size":99817,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1295)","md5":"79097c53d11b499a8ee2a0529a2b01c8","sha1":"861fa1171a579e5a38f68dc3d56968e1d4360cb0","sha256":"381bd40feab54899ecc1e70011d31326c489546c1f1feea933ece5c3143155c1","sha512":"82e93bbf21b6c8192161494a656b26522f83acc15d0b88f9a006d2a3cef38489d68910093493249931b05db1d85c70df5e25e08a6453bd901756b1325fe6765e","ssdeep":"768:ndSSytMP7rZoMNX7M3gEShAmfBAqvEAdmYPsUvHAhdBhNNfxoIPJtEuJ6zAN:nGtCimXoYhAmJAqv6YP3ve9NNfTEG3N","tlshash":"7da3a63179f2102534af428f5267650d2ad0e5cbc809fee476fc12a09fb9da676d326c","dom_hash":"domhashbd0dbb6b52eb5ed7cd033a178e1fcb90","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wlfionerc.fun","fqdn":"wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.21","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-29T13:51:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.wlfionerc.fun","ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-09-01","domain_rank":0,"first_seen":"2026-02-22T13:51:40.92497Z","last_seen":"2026-02-22T13:51:40.92497Z","alert_count":44,"request_count":44,"received_data":5933593,"sent_data":21362,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Twitter","description":"Twitter is a 'microblogging' system that allows you to send and receive short posts called tweets.","website":"https://twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Widgets"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.31.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}]},{"fqdn":"babywlfi.vip","ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-14","domain_rank":0,"first_seen":"2026-02-21T20:18:31.056425Z","last_seen":"2026-02-21T20:18:31.056425Z","alert_count":11,"request_count":11,"received_data":165077,"sent_data":5203,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-02-16T01:47:58.864286Z","alert_count":0,"request_count":1,"received_data":1635,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"wlfionerc.fun","ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-09-01","domain_rank":0,"first_seen":"2026-02-22T13:51:40.925453Z","last_seen":"2026-02-22T13:51:40.925453Z","alert_count":1,"request_count":1,"received_data":116260,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-02-15T22:33:11.747224Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-22T20:11:57.073437Z","times_seen":237487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.31.3","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e45d32ffed6a9784f996f5ee7cbc81d","sha1":"5625c25cfe6a2adb56654ce0a462cbb36553f3e0","sha256":"294f58bed97fc37c901a7684ed71f664088af386ff1fbbd74d28a85cb820a23c","sha512":"e1a90133303dae20802f21aacdf2498179378be745f330a25f16646a0e6c288ec7a9e0f041107ffc14743840a7060d942e334d23ee0574bd4cfdb51bdda43f5c","ssdeep":"768:hB1cI21AHgRdpM4ZfghzDbuDFX6zzyCMt5R8RjDKv//DtZ1XkLVgbpMGMpKEnzBb:tcNRdpMMfghjsFSmt5R8RjD8/uLVlqEB","tlshash":"0de209527296e4a2069f48a3f0331119f3769dd9b80af095b1bcdce5a471f877362b34","size":32879,"data":"","first_seen":"2025-08-27T14:48:45.381225Z","last_seen":"2026-04-22T17:35:55.295798Z","times_seen":3246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-22T20:09:40.911778Z","times_seen":333345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-22T20:07:34.591699Z","times_seen":682352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ff42ec7fd3ad80ccdb6833a54dbbf8f","sha1":"a632c925a2023d41d34e21109bc9f5793129025a","sha256":"bb2d4c2b2014c2d590f9bc0d9eb777117ae58417956e968bc59fab06a58103bf","sha512":"b9f52a49f667b5f3e8c860bf8a00a737cf2a3d048ad8df668f2c0e5b0489ffd905302a70bad1058cf5890f1ebd195a89f4c041992b6b761f472b9a7febb055dc","ssdeep":"96:F++NJkkgIRLEsyDqNyuoSY0fQ50IT1jgRYMRBCJMO90GErP0:AwJtggyDqN9oSY0fo0ITZVFJMO90GEQ","tlshash":"5bd1550b69f618642077b0b95f2f9d066b62d02707c8ed357eac53140f6a83da3b5ac8","size":6212,"data":"","first_seen":"2026-02-22T13:51:45.21432Z","last_seen":"2026-02-22T14:49:37.732985Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d5fe89265eea918151f7dc02a8b0875","sha1":"29a5b291f0ec233aa68b359b4a5d815f76fadcf0","sha256":"b2abc32f8ac7fd97864739a3fa9cf6f5d1f1e12ca8d0ff067647b854068aae76","sha512":"14cf7e28f8ffcb9040a4dc042c1ad2ec04704784d7d543c9a451289cd874e2576147339380ea084fb194f102ece75a1d46e8c6d65281338c59abdb33a8214faf","ssdeep":"","tlshash":"e01108d631b6906eba6fdd3a0736114d2b19a0475c048e0bbfac7765cf4452538f2e84","size":1029,"data":"","first_seen":"2024-08-19T21:54:40.409042Z","last_seen":"2026-03-29T12:33:16.123734Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"890747c5bca6da4a3be06a1e0e331165","sha1":"0ba191b2ccf981672eb84b3683eec525dc73654e","sha256":"222bd7748e846793c35b73fe2f7ee633510028c0d2ecbf15140217fb7e824626","sha512":"499c82fd81126255bca254e843c5aa576174806ac73de14e4cb6d4ef5e32cdc4bc6e534c35b8c1bb28796ac201cbacf6786b7ed323cf3cb39d1d7f4f5d970c52","ssdeep":"48:RIEWFRFb2dKuqfVCXppAUoYpexpuqnkarZyHjM/8JfE//G++lmX+piluMGEjEWf9:OECbup+nYchkCZyHj2bL/bgwXwO","tlshash":"9a81012cea36103f1096d529a96f6542a260044b8c1e3cb97b6c01852f4e21fb2f7fed","size":4130,"data":"","first_seen":"2026-02-22T13:51:45.21689Z","last_seen":"2026-02-22T14:49:37.735802Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.31.2","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b1e4ea934ae31a60c0b66ad172f0980","sha1":"59e3a242b9dc383309a234e99fb4f53320cc48ba","sha256":"53880e82fb33ea08b7ff2de3b200a72f64ee035a76c7254045dc82ab04da067e","sha512":"723905055c0e80739f474b72a2d347996bb453f5cf8c75f6fb118c9034e2dd1670558e4ee3e68afbc7d5b8aabfd634098b6bf0662bbb115d1690597be83cbf14","ssdeep":"768:W/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFg7y:Yt5D1+WE9A5yLcWJ9mBtIoERuWfRMBKr","tlshash":"5513a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","size":44670,"data":"","first_seen":"2025-08-10T22:50:09.603161Z","last_seen":"2026-04-22T16:59:39.380646Z","times_seen":4895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"12acc67fa4b4cc393f30563b9b3ff12f","sha1":"5e0fbc536ed39be4fd40ef232a42308b58848ffd","sha256":"3039bd2c558254f454b0a8d383cf5fc7930199b507bdc36d87a0fef012c4f28d","sha512":"2f4abdb16c99f78702a51a8503e00d2c4f73300b1c2aa868b38ef74919ba8fbcb6f0a0b7175be16b45abdbceaf7fdb07539fcc4523b404c25519da12cbb7bca2","ssdeep":"","tlshash":"66a0019370d76801862695a86a6bed40582119cb028ada9839e99a346b29498788222e","size":74,"data":"","first_seen":"2023-04-06T17:37:00Z","last_seen":"2026-03-29T12:33:16.131196Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-22T20:09:46.310427Z","times_seen":734592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.31.3","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4182d119291ca1d1f50706949e95ddca","sha1":"707f3d72cb5d85974ff5f8482139e146b387e781","sha256":"b5281696983385f2893ca05f86d26ab297d8d9af15fe6ab130db7196c99870a2","sha512":"80043c750e32ed76e3d601b59c9e2e3d62d6555d49ac7c5b24119fa50c5a32841f0e6bf76923d2371ec29b9ef99a90b4d67705b1e8db8d04bd7dc4346f896072","ssdeep":"96:B0AtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:fsNukQ6jq9OVM6MeHGlQTvog02","tlshash":"6ec153941a54fd2b22e135d9e41ba734662ec0333c1af9c1fa22dce955e8fd183aa531","size":5707,"data":"","first_seen":"2025-08-27T14:48:45.447678Z","last_seen":"2026-04-22T17:35:55.370464Z","times_seen":3249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.31.2","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91e2eace8652a661d8c8bdf6613236a7","sha1":"afca4a2a64f51b1f213ddfae9f270c8add2959a0","sha256":"7121fc5dec5cbdfb78786cd4018f5239ce4df4745abbbf20be2a1d17cc23e1ea","sha512":"d383cb0e216b4f724dcc706b945088c8ac213c97e44b636ce99b76d054d729abbc9bcbdc5058960bc2b145fd9273e77672bd1d26de27059380c7aa071a6fb90e","ssdeep":"96:BEdxwrudY4kjboFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:eTXd4jboFemUN537MPa/pMdOQ8Mk2","tlshash":"9bd1569805489d2b26e43ad8b15b6b741b3dd0323c5ada81e611eddc18fcfd187ea532","size":6248,"data":"","first_seen":"2025-08-11T06:13:36.205631Z","last_seen":"2026-04-22T16:59:39.347282Z","times_seen":4905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.31.3","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b151ba1913c2f1a0201a8f7025d9a5d7","sha1":"5bded99596c9eafd4c49c7a50d7e29b13b1ed74e","sha256":"b386f21750f52c7651ff25168d1935ba7fdcc946b16668a31ad568a20b3001ec","sha512":"1e98d0e514236846979b63db06425eae24444e1713c8c23cf8c2d963379da5cd3cbbe74103dbffd6785484b5e87743acb53454d6cb8f118de38660ede99e922c","ssdeep":"1536:5myQ5RSSYeAjA6c9CSTYI83Fu0K4cR8+y8iA2pXS9xfYNQAzeLHeBHmjkvzRN2:T+ugRAm","tlshash":"6123c8853652f4f70beb44da902f450af25619a8640df4d4bfe9dce194b0e8e133ab78","size":49432,"data":"","first_seen":"2025-08-27T14:48:45.407962Z","last_seen":"2026-04-22T17:35:55.337007Z","times_seen":3249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d150b5e9e799e3f756983def694e3765","sha1":"80c3857d62032dca6143cdce7c9533f440b6afbf","sha256":"6fc374ddb226d726f43d02f7b371a7979575e73d94f75139ecd5b6aff35ff9c2","sha512":"9c41b8505c3425d464d52395b70bfe10d9551d610ed314228a840d0da19c2d6ae02f8fc93230b6be8b390efb2e07f27d21ccd454f98826d10616850b372f663b","ssdeep":"","tlshash":"8f3124155a2111329c61f6b930d73956b87901cb8ea8787dbb5c80710f8f12de0f726d","size":1672,"data":"","first_seen":"2026-02-22T13:51:45.219548Z","last_seen":"2026-02-22T14:49:37.738309Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2617d2a8d836aa73a60a1337fcae447e","sha1":"9881ac8869d7ca06b54c5761d70531ee1b6f4a05","sha256":"442ae3caafe1514a6ce6b121c44a8c888e9c9487af818d9d213a2bf292188386","sha512":"546a66fc548450a648695810ff91e38900fc6c4648bc174704bd1903294e3f24571ad6680ff46ecfc0aa89929bf38ad377c6a408182255188d4ac496a1ef66af","ssdeep":"","tlshash":"9e51abcd76d319e188bb196576bf0469b9f56097d10ced023c1c46c00fe94383b5876e","size":2591,"data":"","first_seen":"2026-02-22T13:51:45.220984Z","last_seen":"2026-02-22T14:49:37.739941Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.31.2","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecf80cbb272e8005df8aa6ec914a6124","sha1":"5eae643d58d6d99f51474b2bf2eb4d3ad6fa36e9","sha256":"a2467aa115eb2eed954a7f2612c08c1a4f74d660c873528f9fef23a1e4ac4704","sha512":"0b33cc377db797b7741bb0b9e912d798a7decda063d577f28cc380f4f0071b4f9a5d4ddf805be70c98fac9f30dbc18cb86ca8f6fffc8710ee3978f9343a40aab","ssdeep":"384:Qxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+pQDTWmMo7YtDTVHJiMqkoh+vFWN7KS:Qxw+EVxFm6cKikdHd7taQtHuGJswg/D2","tlshash":"9bb2d9013163ac7a50cf815be467420e77378894740570ed7abc6cdba5b8e9a33ea339","size":24210,"data":"","first_seen":"2025-08-10T22:50:09.558424Z","last_seen":"2026-04-22T16:59:39.334755Z","times_seen":4919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/wp-emoji-release.min.js?ver=6.8.2","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-22T20:06:39.852157Z","times_seen":199023,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"626a8a1a627c95883c285f02d1a0aee7","sha1":"bc93d110fc745f162cce6deea02d4d6d8359ddb2","sha256":"169d406ff88c6de05695ffdd6b88ffac28a47499df1ec38141056ace59d6a1c4","sha512":"7298d74a089b880b7cb315d4489cc57755d31da26b91caa8a467a8fd9d9885646fe22c7184c73c4934c2d567a81f684ddc4057f62fab0f098d8ff0d145c7d721","ssdeep":"","tlshash":"2241ab14f6b365d4b87b5a3d97bf211a7a7118831004ee44bd9eee400f90b6409bdbf5","size":2245,"data":"","first_seen":"2026-02-22T13:51:45.222924Z","last_seen":"2026-02-22T14:49:37.741503Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-04-22T20:11:13.817742Z","times_seen":241473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1e87433534214c42bc5e80a6d96f9f9","sha1":"56269ee46b410ad42b3dc1281ff85ec0b5d6bba1","sha256":"d09012005a283292d543b53dd988d15275c61904c97ebc45de2110b3d2f7d9e1","sha512":"01e58eafae7f22a4714814e5bb4d9472358eacfbf7e04c9d7a0a46e90ed0bf064f1ad1378055927d556f7c9ed5ecfa3e5a4c6cd4e08bb38a15fb58e3c64c3c69","ssdeep":"","tlshash":"f3316a66724a5d3a045ec2b72b4b6aafb26695cf9441847c7039fecf0560dd123e23b3","size":1846,"data":"","first_seen":"2025-06-08T21:36:43.872332Z","last_seen":"2026-04-22T18:31:40.826364Z","times_seen":11684,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-22T20:11:13.86976Z","times_seen":213854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.wlfionerc.fun/logo-web-2-1024x205.png","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /logo-web-2-1024x205.png HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo-web-2-1024x205.png\"\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"78c86762878917bc270a2319be960b05\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::njn4v-1771768278049-c88fad07a107\r\ncontent-length: 9021\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"78c86762878917bc270a2319be960b05","sha1":"988f32a5903a3971c4db14ff674d92edc4d61393","sha256":"a628dc345f680e4bedcad9b0220bfdbc26fc163520f63aac379a6573e984245c","sha512":"8c42bdd44a7bb8dbe0111964ed8af64defba64239fb6fdc7669c0225194fbf8f45ad09ba96f03b290a5fefee38ce12248677ead1e4a218f714c7c502280f0034","ssdeep":"192:WS0tKg9E05TKpYHicBPj+uZwgEvjH5HPNanBN3KlpWlDaofY2Gne1r:qXE05MUDBj/ZxijZHkKls4nir","tlshash":"f412af0fc43092ef759bf9294ac59501ba6154ec6ae137bc40e955ef0442f02ef35b6a","first_seen":"2026-02-22T13:51:45.150342Z","last_seen":"2026-02-22T14:49:37.71765Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/main.jpg","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /main.jpg HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19011\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"86c014fa654d7a1fb9122789e415b801\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vp775-1771768278054-a24717888515\r\ncontent-length: 83057\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":83057,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 629x390, components 3","md5":"86c014fa654d7a1fb9122789e415b801","sha1":"cb63bbbed71de13c4e3d9a5bf10fd46049706e35","sha256":"7a1c10e6ff520cdd7f3594d9395890cefc377aa2155b04ff60e2270e98666e91","sha512":"c4a0c6c1a5a1c9e6f5feb6fb73109431ac16294e67359401eb8f826e8819d12a488c231d2d667dedcc1c5b312cabfdd0a3988e798a2878c881b4b31c4a9fa27f","ssdeep":"1536:AA8Qn20sZeFkl44OPh4SPguUJd9sjZQdGgEjyY6HHaCyfVRqVwOgVDk0ELGN4K+:AA8oBsZeFklBOPh4SQ3UKduyY6zybqVN","tlshash":"5c8312efce749821aec781522134ca03ef79ae905f036ea1251edf691e93ac67351099","first_seen":"2026-02-22T13:51:45.152764Z","last_seen":"2026-02-22T14:49:37.685668Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.31.3","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.31.3 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19011\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"frontend-modules.min.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"60cce8d3d0354783196de3408672eef5\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wxjv6-1771768278061-89974861f611\r\ncontent-length: 16328\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":49432,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49391)","md5":"b151ba1913c2f1a0201a8f7025d9a5d7","sha1":"5bded99596c9eafd4c49c7a50d7e29b13b1ed74e","sha256":"b386f21750f52c7651ff25168d1935ba7fdcc946b16668a31ad568a20b3001ec","sha512":"1e98d0e514236846979b63db06425eae24444e1713c8c23cf8c2d963379da5cd3cbbe74103dbffd6785484b5e87743acb53454d6cb8f118de38660ede99e922c","ssdeep":"1536:5myQ5RSSYeAjA6c9CSTYI83Fu0K4cR8+y8iA2pXS9xfYNQAzeLHeBHmjkvzRN2:T+ugRAm","tlshash":"6123c8853652f4f70beb44da902f450af25619a8640df4d4bfe9dce194b0e8e133ab78","first_seen":"2025-08-27T14:48:45.407962Z","last_seen":"2026-04-22T17:35:55.337007Z","times_seen":3249,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/2025/08/bitget.svg","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/bitget.svg HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19007\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bitget.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"24152fc8ff27792e1764736e1e189734\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::g6pns-1771768278484-1518b3041ead\r\ncontent-length: 482\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":482,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24152fc8ff27792e1764736e1e189734","sha1":"d3085cd0db0efea333611fe4a0a8a2d400126321","sha256":"2206850f40a5d128d075d197ceb44ba1b31852c5a85e429b960f6002ea9795e5","sha512":"07bee460547479b2b68c25922768a0bc2bfc084818157abc3a21c1b3d058071e45f65a1a41036cf13c50fa7bb9df3cac5c351e569ddce9186de23a60771d7825","ssdeep":"","tlshash":"fef09eb451e94250922cdbc14a34f8b0412330d8ab780186f9e00aac6ae468afc92ee4","first_seen":"2026-02-21T20:18:35.651652Z","last_seen":"2026-02-22T14:49:37.714119Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/wp-emoji-release.min.js?ver=6.8.2","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.2 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4769\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:10 GMT\r\nlast-modified: Wed, 18 Jun 2025 01:53:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 63188\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqCz%2Ffh86eb2YpY0fBApro03JZBgrC1Qmu3WEsEyGnVaUNETWkThE3mOkjyW1c8E9wjK5xMcfl%2BcLhBEf%2BJTR%2FT8w%2B9ovn1C9Iew%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d1ef51cbd1fc8c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-22T20:06:39.852157Z","times_seen":199023,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.31.3","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.31.3 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19011\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"webpack.runtime.min.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"b085c811b1c43a5a15e0fb259153060b\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vp775-1771768278060-dc5de4e3847e\r\ncontent-length: 2619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5707,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5667)","md5":"4182d119291ca1d1f50706949e95ddca","sha1":"707f3d72cb5d85974ff5f8482139e146b387e781","sha256":"b5281696983385f2893ca05f86d26ab297d8d9af15fe6ab130db7196c99870a2","sha512":"80043c750e32ed76e3d601b59c9e2e3d62d6555d49ac7c5b24119fa50c5a32841f0e6bf76923d2371ec29b9ef99a90b4d67705b1e8db8d04bd7dc4346f896072","ssdeep":"96:B0AtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:fsNukQ6jq9OVM6MeHGlQTvog02","tlshash":"6ec153941a54fd2b22e135d9e41ba734662ec0333c1af9c1fa22dce955e8fd183aa531","first_seen":"2025-08-27T14:48:45.447678Z","last_seen":"2026-04-22T17:35:55.370464Z","times_seen":3249,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6812\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Thu, 06 Feb 2025 17:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 63188\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23sE6ljVItE1Ht%2Frwb3p%2FAxbOhkDuI97wbCf74nLh9zv51kN%2BAwQKb3kN%2Fz6yMZJ8MlXKVmNpI4%2Bz%2BhH%2F2NSKmCn4m%2FpgIN7%2BOXqJA%3D%3D\"}]}\r\ncf-ray: 9d1ef51a4d601243-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-22T20:11:57.073437Z","times_seen":237487,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":18,"connect":11,"send":0,"wait":16,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.31.2","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.31.2 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19010\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"webpack-pro.runtime.min.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"7f68689b41dae85caa9e459cf07d0da6\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::72nx2-1771768278065-5b2088d7d30f\r\ncontent-length: 2950\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6248,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"91e2eace8652a661d8c8bdf6613236a7","sha1":"afca4a2a64f51b1f213ddfae9f270c8add2959a0","sha256":"7121fc5dec5cbdfb78786cd4018f5239ce4df4745abbbf20be2a1d17cc23e1ea","sha512":"d383cb0e216b4f724dcc706b945088c8ac213c97e44b636ce99b76d054d729abbc9bcbdc5058960bc2b145fd9273e77672bd1d26de27059380c7aa071a6fb90e","ssdeep":"96:BEdxwrudY4kjboFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:eTXd4jboFemUN537MPa/pMdOQ8Mk2","tlshash":"9bd1569805489d2b26e43ad8b15b6b741b3dd0323c5ada81e611eddc18fcfd187ea532","first_seen":"2025-08-11T06:13:36.205631Z","last_seen":"2026-04-22T16:59:39.347282Z","times_seen":4905,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/670955e27c5afb836c702314_dextools-p-500-1.png","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /670955e27c5afb836c702314_dextools-p-500-1.png HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19007\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"670955e27c5afb836c702314_dextools-p-500-1.png\"\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"1e96972da531e58ffa3170e609461b0d\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mks7b-1771768278484-ddd0f3a08f3f\r\ncontent-length: 40834\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40834,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"1e96972da531e58ffa3170e609461b0d","sha1":"74e7532b1c6436f606b5ab7e268fddff16dee36d","sha256":"8ae3d5a114fbee0edac05b7c9acbc45f8b9ce39c4004bc8bc6b40a25abe75b33","sha512":"f5f857dae6ae0240c22ca6133d1f12d71b606c5135b42450c058fd0dda196217d2be64c259e9fef7eba04c0914adbf74a4fbc42f9f10ddd44fb70c87c6ebc3fe","ssdeep":"768:KT1F57PNPrF/o/pA2m/NVUPTGP+C+yM1qTjbD1ZflRMaehYuJLa3dcb:SZPNPrF/oBA2iQP6GiKqTjTffdehJLag","tlshash":"ee0301b25d4bd98970da0cefc805f03f953b468f1d1a056e327e79b6a256e704a1cb0c","first_seen":"2024-12-04T01:10:59.414608Z","last_seen":"2026-02-22T14:49:37.72677Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/2025/08/cropped-mini-logo-1-2-32x32.png","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-mini-logo-1-2-32x32.png HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19000\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"cropped-mini-logo-1-2-32x32.png\"\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"ab0264e50917777aead1becb170ebf25\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::28gkg-1771768278959-c3aaf0e281fc\r\ncontent-length: 979\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ab0264e50917777aead1becb170ebf25","sha1":"eeab2e7486e39e66f8b142296cdbfe61fabd493d","sha256":"730e5e62a5979e9ebc707a691cb756894d0b4a430d999f16272e72e2250d6ac1","sha512":"b3f95b70a179ba3dbf31f344c5abc49f3071a7ff974ea62df2713112f7556ed973ec5ae06d4e29824e5f0f281f2b3f643ca9a262b33c7e9082cb570c25ec4ccc","ssdeep":"","tlshash":"d311c8628988f57dec14e1256892d2dc9e62c691ad3e308a2556c03d4538a745c2038e","first_seen":"2026-02-21T20:18:35.649854Z","last_seen":"2026-02-22T14:49:37.722373Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.4","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.4 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"reset.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"097116dd81e3508bbf2a3aed42164300\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mks7b-1771768278033-89140fbf0e9e\r\ncontent-length: 1873\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5456,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5455)","md5":"af4b9638d69957103dc5ea259563873e","sha1":"1d048e10f67e855fcef131c910f5e46972181596","sha256":"2f01a854a759c0a6a6911634e4ae5283b86a054908e4587c1fd17561fe4ce3cf","sha512":"434169ae8237d9417f43ee48a8ed3a372c64f73d5e189f5f23656f92a9f2d3c494e07875829341a971ac7aab68472033e8dca833bc37f53a83159fde9a512365","ssdeep":"96:vS+FXXYXqXXXNuoSA1C4pIGRhPCZBG9Hzk09ETReQWe0OhHTZZkUg/2UpGE:vDFHoyHNuL86+hKZBG9HUXhz/ad","tlshash":"b0b15363971031497537c83636d17e947e226215c8332ab4e426aafccbce4275a39f9a","first_seen":"2025-06-08T21:36:43.859934Z","last_seen":"2026-04-22T19:36:44.953157Z","times_seen":29760,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.4","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.4 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"header-footer.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"1284e1d3e6b876f67bddf8481481a331\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::925cc-1771768278037-90fc22bbb7d2\r\ncontent-length: 1544\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7182,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (7179)","md5":"86dbb47955bb9db9c74abc72efb0c6f6","sha1":"66e008f8d28438934133a914efc7a40bd9fbad5e","sha256":"5052c28c33de995612b9c064753ee989d1e7755027e2b80292148728f444ec8d","sha512":"4a17290a195e7ead6048fa07dde958455f508f57d3c147f49cdfd32db655b8bc19e0b476611bca8b1a1a7eaf4df88185a861b74aab65366175701809defd6105","ssdeep":"96:3dOg5c2yhjF8MsobtKv1j3ykM0UfU5nJzyC2sy6ZM3zzirdae64Qf3mfOOeZhYD:F/9j3EU5n1lJy6ZNZaL4nh","tlshash":"88e19f67f8f2317813378223a7d047aea07ac10dd807aba551ebc31b05db45227a7f69","first_seen":"2025-04-10T05:14:02.600959Z","last_seen":"2026-04-22T20:01:03.15458Z","times_seen":29780,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4678\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 63188\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o9F9XCVzyWbxKC5xXMTKfKwDfmx%2FnBHPD27RBe53%2Bms862vVj1I8oG1BDhqBGuH2sqZxaV%2BJE2UR7SGEUXHrC7U2t4vqKOJNexwKRQ%3D%3D\"}]}\r\ncf-ray: 9d1ef51a3d491243-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-22T20:07:34.591699Z","times_seen":682352,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":32,"dns":17,"connect":10,"send":0,"wait":19,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/670954e4aef22f16242cf753_X-2-p-500-1.png","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /670954e4aef22f16242cf753_X-2-p-500-1.png HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"670954e4aef22f16242cf753_X-2-p-500-1.png\"\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"c6595b6a2ce0f9742a28c3f9bf43635e\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4cdfn-1771768278049-f84101fc522b\r\ncontent-length: 10453\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10453,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"c6595b6a2ce0f9742a28c3f9bf43635e","sha1":"f678c8df121136981107c9783df758afd662388f","sha256":"39886fe6b37da5b98cee20a276d699c452189695f538ebf17e326617d395b5b7","sha512":"8d481b11fdc8c8c79b82c41486e59968819ec8ab84a67d2843d9d80250c17e09a20e70a7fbd45ff7e062475cfd00280ce36c4adf30a7f783df6bff6b4f4df878","ssdeep":"192:7gSkrsmG0uPmRMJ5/lh7RtK9/vqZeYksUaD/x5IZ2swFq:7gS6smjwmRq5thRtKxqZ3nIYk","tlshash":"f122afd9d0056418d01e07a4beb1175c692e0c143cf2e623f524fca9a33f0e89a59bf5","first_seen":"2024-12-04T01:10:59.406258Z","last_seen":"2026-02-22T14:49:37.718535Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/6709541f0af3ea70f53954c4_X-1-p-500.png","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /6709541f0af3ea70f53954c4_X-1-p-500.png HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"6709541f0af3ea70f53954c4_X-1-p-500.png\"\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"17ebf374f5c41eb12945c85795cef539\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::x5b8p-1771768278050-0fa804ce26c3\r\ncontent-length: 15038\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"17ebf374f5c41eb12945c85795cef539","sha1":"dd13c3904eb279e64995a27bc94aee272bf63b3f","sha256":"72ad41e675e385ee7d1a64483090e52bd38fe7fb25ad91b904cceb7ced9ec988","sha512":"00b34c2e37b23eac82913c989cf6c20c800231eae18c3cbbd8ba89b5a71e281c919116c68d7dd930c4d7e21a23cb8901ef377e24aa7c1fec4fee21e00b1afb15","ssdeep":"384:7GczQMN2c8PpWhTIM89q5ugyCVmUvG4odhjHLyR3:Zzfo3hWi25ugbV3QjHGR3","tlshash":"fb62aee40d62e3225285ab90e6a0c9530bfc9c7c6d7fc20e9164f90f97bfea40925624","first_seen":"2024-12-04T01:10:59.412303Z","last_seen":"2026-02-22T14:49:37.70113Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.31.2","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.31.2 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19007\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"frontend.min.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"5d17e741088aed32ce7bc89a0736b97e\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wxjv6-1771768278068-9e4ebc08ce67\r\ncontent-length: 6929\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24210,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24166)","md5":"ecf80cbb272e8005df8aa6ec914a6124","sha1":"5eae643d58d6d99f51474b2bf2eb4d3ad6fa36e9","sha256":"a2467aa115eb2eed954a7f2612c08c1a4f74d660c873528f9fef23a1e4ac4704","sha512":"0b33cc377db797b7741bb0b9e912d798a7decda063d577f28cc380f4f0071b4f9a5d4ddf805be70c98fac9f30dbc18cb86ca8f6fffc8710ee3978f9343a40aab","ssdeep":"384:Qxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+pQDTWmMo7YtDTVHJiMqkoh+vFWN7KS:Qxw+EVxFm6cKikdHd7taQtHuGJswg/D2","tlshash":"9bb2d9013163ac7a50cf815be467420e77378894740570ed7abc6cdba5b8e9a33ea339","first_seen":"2025-08-10T22:50:09.558424Z","last_seen":"2026-04-22T16:59:39.334755Z","times_seen":4919,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/Coin_Animation_T_C-1.gif","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /Coin_Animation_T_C-1.gif HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19007\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Coin_Animation_T_C-1.gif\"\r\ncontent-type: image/gif\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"6d33553ef4d8831069d426ed4d494a3c\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qsft5-1771768278481-196d526df196\r\ncontent-length: 4217054\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4217054,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 720 x 720","md5":"6fef75d9204f11107f1a5bfa21ee385a","sha1":"3ad9842edbf9e1b1ac8d4301975455db1741a0cd","sha256":"7c47c96cbccd949529b65e9bf4da299ae167b106b76fec9cebf249f482d3be56","sha512":"19c9f83fcd61346bc2ce2f542c1822d9e815139cc1aa1e96941d362b4bc2202aae6e17cc9561a93930c585f1013da1dad5ac9736335d04f10d86ad58f37a2620","ssdeep":"24576:PGOBPZe6rSgXxtFSFg7irxPEpjNf1Jqivwqvk:eOpQ8SgXx2Fg76PEpjNNJ/IGk","tlshash":"fb253305824ac615f95796d09e90a1e722f370fc31ac1bb2352eff87b4d30edaac2951","first_seen":"2026-02-21T20:18:35.653999Z","last_seen":"2026-02-22T14:49:37.693883Z","times_seen":4,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":303,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/elementor/css/post-191.css?ver=1756354683","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-191.css?ver=1756354683 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"post-191.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"f7add533a5e8fd11d3298dd90fcb2a20\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wxjv6-1771768278046-ba7a23ba8566\r\ncontent-length: 382\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (382), with no line terminators","md5":"f7add533a5e8fd11d3298dd90fcb2a20","sha1":"fabdcec4165e1a0576a8498d8918dd9d0574c2e0","sha256":"29ffaa46993bc0bed556763862ae2fd11c5c8f90ea6a18393589e8b827074e75","sha512":"70af60e54046b6ee63e56a181f5241dea406c9c275f8aea449231eb1632d08fc05a8367c64e41e4cd984417ac5dc8e9b375b31e359d9d5de5da28497c8d0c3c1","ssdeep":"","tlshash":"86e0d8ba3d4703a4217fc1179023e95c833208ee940267b8f85a944700ff85a7642e06","first_seen":"2026-02-21T20:18:35.611614Z","last_seen":"2026-02-22T14:49:37.709469Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/elementor/google-fonts/css/poppins.css?ver=1752514737","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/poppins.css?ver=1752514737 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"poppins.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"c31898092d158a7b001ffa1be7785dd9\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::925cc-1771768278047-75442f897092\r\ncontent-length: 897\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25331,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b268a392089823376225fe30ddf41e57","sha1":"3a129a7f0a26727de965d27a43560fbb619f0c4a","sha256":"890f770bf36200462bacdc172aeee1684b914cccfd2ddde440a221a851b54d4e","sha512":"d7c9d1a156d1214bcf63218d499f015d8e957926a13cb8eae14d36cf48f1237da7b5659322e5539b28495fdc03308b8bc590bbb6678194eba2467da0241670ed","ssdeep":"384:H3O3S3DLPDEwEuQkxdx8os6Giz37Is9keQBUnB:X+SVkeKG","tlshash":"08b2e0a10c6b9200da9b5cc023cf7d29da0ea155b040e5b46bfe08d9eddac556373b3e","first_seen":"2026-02-21T20:18:35.617284Z","last_seen":"2026-02-22T14:49:37.68314Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://babywlfi.vip/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding,User-Agent\r\nx-litespeed-cache: hit\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzWhDuGbwfMsqGIIFui2QEqZKQMZ4JQAUIY2BVgJJmCE7qELEPDdc8sYCDxYlIx5oZQlz68rtgGRyaQ8Y5E2NhnTKbjjmxQ02g3g3A%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9d1ef51e8d55c8c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/cdn-cgi/rum?","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1030\r\nOrigin: https://www.wlfionerc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::ggsgz-1771768278997-e5eee2a8bae8\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1e50ebc3d1def66b164745aca2269900","sha1":"9fbfc95ce353cb4b11267d79f623a99534fb0397","sha256":"55ef842587876679226e0d3a5c03a9027c6427287147ceb9a65e8879a4bce414","sha512":"d5718f1cce34d8ab008bfc75df2266b51e3fd22bd77fae288fea563dfd8482d1767da90d893c2e3d55e2ee5b3dc01c62ea7fb5f9f95811e1d623bdf01148013c","ssdeep":"","tlshash":"c6a0220e08c20ccc33ea0c0c20830a3c00080822bfe0e220a0cc3eaa3208ecef3000c8","first_seen":"2026-02-22T13:51:45.175685Z","last_seen":"2026-02-22T13:51:45.175685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/elementor/google-fonts/css/sora.css?ver=1755397094","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/sora.css?ver=1755397094 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"sora.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"9ef8566db27d25883e229b86847c648f\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::x5b8p-1771768278046-f0a6fda9f1cc\r\ncontent-length: 451\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7632,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"83a687c8f6490e011c04ea9a4f6e9990","sha1":"2b8a54d22325964178c8f27b57fcc044a50baad8","sha256":"580c62080839250c0527cc36970ebf4677a3ccb85bef38cb0138c4778c50447b","sha512":"60d2837f90cf07397415448f457aeee7e2a00b881a541e21baa2c8290aa13c88a1577e1b75d9c359e54e8846d93ffcb4c0def4af76cab4696a71a3d8da365ab3","ssdeep":"96:EOS0aXRJc+uoOS0aX+NlO6aXRJc+uoO6aX+NlO1aXRJc+uoO1aX+NlOEaXRJc+uB:gpxLpHxsgxztxSuxBLxokxvRxeB","tlshash":"f7f1ed9008575600d7a75dc072c93d2aee2e6096b045aa686ffb14dcfd9ec0a631371e","first_seen":"2026-02-21T20:18:35.633942Z","last_seen":"2026-02-22T14:49:37.72839Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 22 Feb 2026 13:51:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://babywlfi.vip/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding,User-Agent\r\nx-litespeed-cache: hit\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2L02UE%2FmJ6V9T8kE1%2FoOHqv3GTXO93y2nMpm9aGDOWJynTjo4S%2FlS1s7bjZKs1o02ukvDJgsXZL3J4OQcg5SbwWVT4CEuYcF52%2B5NQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9d1ef51fbd92c8c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-22T13:51:17.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:17 GMT\r\netag: \"4217e09321548e892afca5f6ce3e168c\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::96xpr-1771768277780-193fdfd197b4\r\ncontent-length: 19388\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Twitter","description":"Twitter is a 'microblogging' system that allows you to send and receive short posts called tweets.","website":"https://twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Widgets"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.31.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":115942,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1283)","md5":"4217e09321548e892afca5f6ce3e168c","sha1":"1f059933b532b40bccef1d4bc8ea235d08dd35a0","sha256":"43092a30022babd017a59f71c59bbf0fc8fda2ad8c008664e25f4c7043db4fd7","sha512":"657aa441582ca82e25ee4fca66f9798a03c9751f90375b14eef02505aee1adf446690f82cd768fef3b827d02db1450c2c599bba9618807074dbad03d04c06277","ssdeep":"768:GCSSytMP7JcK97cPeAsFuW9JFlt0lz6DclvHAkdBVHEfxoIPJtEuJ6zZj:GRtvK9iAFuW7FltBDclvTpHEfTEG0j","tlshash":"e8b394603af31091306f41af9677750d2a90e4cbd808be5876fc62904fbada5bad375c","first_seen":"2026-02-22T13:51:45.179735Z","last_seen":"2026-02-22T14:49:37.690375Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":93,"dns":61,"connect":1,"send":0,"wait":10,"receive":12,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.31.3","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.31.3 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"widget-heading.min.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"8078ec0ac924f7e72ade590ac8b2cfda\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qsft5-1771768278042-26b8d6c1a8f8\r\ncontent-length: 600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (560)","md5":"8078ec0ac924f7e72ade590ac8b2cfda","sha1":"45044816e2204a0840794af8c65d40997205f648","sha256":"c410788605db43c5c6a9df75bc9915b86a9e908f400acf4d5a3fa20fb93f08bf","sha512":"799f618c7da2c6ecb4a89f4a675255fa1ef0b5388483e326b48f81c9ae0efa214363623b8255a7c26bfac52b7f048a21191fee22d7b28774ebe2f7635accfa5a","ssdeep":"","tlshash":"c2f019237e4b9469783f195b1143337c74944ec893a0a4d8e9fa91435df4ca27370611","first_seen":"2025-08-27T14:48:45.426129Z","last_seen":"2026-04-22T17:35:55.310991Z","times_seen":2642,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29744\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Mon, 28 Aug 2023 17:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 63188\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UvKbO0myAQ5fn3lJ6QB6Mbp1XrfvyJSnDgBHGN3XOOCRV8sO4GQFIpViknL116qqO0uzRSXGEg49fj7K%2FHpeR7GuRxJwVL7sgR%2FIFQ%3D%3D\"}]}\r\ncf-ray: 9d1ef51a4d761243-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-22T20:09:46.310427Z","times_seen":734592,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":43,"dns":1,"connect":9,"send":0,"wait":14,"receive":2,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/bg.png","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /bg.png HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bg.png\"\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"69394f054a131aa58d07e8e1700eb35d\"\r\nlast-modified: Sun, 22 Feb 2026 13:51:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4cdfn-1771768278054-3eac8fa82621\r\ncontent-length: 296559\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":296559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 629 x 390, 8-bit/color RGBA, non-interlaced","md5":"69394f054a131aa58d07e8e1700eb35d","sha1":"fab794a0d81fbc4967b630c2da71858df5cd627d","sha256":"5a6292c4cdc1e7dc06a425ad6eccb00bf14218cbca8dbe8f3380e22c601b8fc9","sha512":"0c658b64575af34b55d4eba629f9b9d58739882f5b8dde0dc114212aa7e2c57b61b9ee91b15a35c3577ca0b1f1200474c1072aab9122be18774a801871108514","ssdeep":"6144:W433FylHr5tKwgNGb+pdAJ8loBBUCespbSDpT9aCIpP:W433+5tKwgEb+pdAJcAU0pbSFTVEP","tlshash":"aa5423eeccc6bfbbed226d74dcdbd5f80b100607f0141648a79188e25b18f99926d987","first_seen":"2026-02-22T13:51:45.184316Z","last_seen":"2026-02-22T14:49:37.719254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.31.3","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.31.3 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"widget-icon-box.min.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"9742a84b94041a4e2a98435439c4533f\"\r\nlast-modified: Sun, 22 Feb 2026 13:51:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jlwg6-1771768278042-c8a662857f05\r\ncontent-length: 487\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4430,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4390)","md5":"db61bdeab715ffa329d82540a2115a4a","sha1":"79260a9b634893355d3344b1ca2d4abd0449e823","sha256":"5adcc1ba9b40408a6ec2e3f3af016479287573bc8bdc2dd81a42406b3fe539b5","sha512":"768eef0eb1fc641d27586802499252171f8db7d14950552b70d7405298c354d65ab540aef44f87f8ceba8b800fdf069e7b990942bb9e22f47d99f58a54a12d4b","ssdeep":"48:BvAtZryDP/ey5NFe+5p6e/5k7eE5bcsbeRh5Op0weJo5Hse9538U:B9ClqfkbaRe23JeX","tlshash":"db91a50539a761025e2f501b1a87140cb56448d8ecebade7f861fe019bfbdca2752c7d","first_seen":"2025-08-27T21:14:20.944473Z","last_seen":"2026-04-18T08:31:36.654257Z","times_seen":555,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fontawesome-v4-shims.min.css","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fontawesome-v4-shims.min.css HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19011\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fontawesome-v4-shims.min.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"76e30510ed576e7bb442ea47baba8277\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::72nx2-1771768278051-2fe72fa9d1c1\r\ncontent-length: 4113\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":17526,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17309)","md5":"581d8f457851efd51aa67bb59be8bcff","sha1":"bf69870bcd22cdc0e87a1d5afa9e3fd0da2a4f7a","sha256":"b2a642b7b0d620d80f0c2a05dc3bcc8d173143496173c2cf2302242d4ad10d5f","sha512":"f088163d5a0fca5be8fb8eeabc2bf0967804e538ce590b43584e57beedabd91d1a327c88abab4ecebbc3a3a5fb90fb7fa83e2a80fcf25ed21d815f9f9aa5aaeb","ssdeep":"192:HP6sjtiDHup2kdbh0WhemPqUOPfeu7ZVkPwU0PSHZfoK0HGXBhL8kbt:iUoOpL0QZPqUOPhHkPw4ZAxH0Ykbt","tlshash":"c572cae4e70c01d7a32cf44beb51b22863b6b73dd5814c98f02b794c69d329672c5b6a","first_seen":"2024-03-12T06:56:38Z","last_seen":"2026-04-22T17:12:10.36651Z","times_seen":1732,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 22 Feb 2026 13:51:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://babywlfi.vip/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding,User-Agent\r\nx-litespeed-cache: hit\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRaT05vC3y5u%2FPxJVCm0o5jKHm7QppSyCAmXcdA6PGadHXun%2Bh6FDV7AzaMRTCo79%2BsA6%2Fu3e0nxSGTf4A2mnFuVJDZmfmyRcpBNHA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9d1ef51f9d84c8c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1571\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Mon, 30 Sep 2024 05:11:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 63188\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AV5x%2Frslfr1fFeQ8OK47jAAj5O21Bh61hRWDWUl1I1IkAbfijFMGI%2BOjLH3eRGlSKL009gg32uVKHFRzMdbHJWbzp9B6tPxnt93M%2Bg%3D%3D\"}]}\r\ncf-ray: 9d1ef51a4d651243-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4776,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-22T20:11:13.86976Z","times_seen":213854,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":3,"connect":10,"send":0,"wait":14,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/2025/08/cropped-mini-logo-1-2-192x192.png","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-mini-logo-1-2-192x192.png HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncache-control: private, no-store, max-age=0\r\ncontent-type: text/plain; charset=utf-8\r\nserver: Vercel\r\nx-vercel-id: arn1::4j66t-1771768278959-37c8af533134\r\nx-vercel-mitigated: deny\r\ncontent-length: 59\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":59,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"4e97726913e4941eb673931cf0a3d806","sha1":"00ed6d247cb672efa4bc5b629fc5c72a6e98c9b7","sha256":"5764f8957fee51af12ccffd4a47215cfa77bfcc9996bb4b0353f627ff27b1228","sha512":"3d214f1006091cee3353ea947517a9ece29efca590d722a6fd9c1688a8644b0e516b6abc27fcc056fbaeb402dd73486c2e58c65c1188a6d020ed378c9af6d231","ssdeep":"","tlshash":"0aa002a9484f119d33c7474160498a055a8273683856d1029e88630b891d21d87c564c","first_seen":"2026-02-22T13:51:45.189108Z","last_seen":"2026-02-22T13:51:45.189108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1752514725","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1752514725 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"roboto.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"d7fd52794088ecf0f4f1571b9583dd29\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::czwhr-1771768278045-a94611a63b43\r\ncontent-length: 2035\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":111780,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a432aa7e8541cba823652890b91600c4","sha1":"1b1f759c28df01bc6be212fc96ec373fcca6c1cb","sha256":"ecf4b5ef3c2c03db3c64d825acbf0dc4508c8bb86fc80bca97650729c6fb1f5f","sha512":"47db83056842cdabf827bf5e940c3ce1f7bb8e1ed14854668a5fe378113fbbb8f0bf101c00f3167884d77852fd0f4fe4f8395402853ea7e3f79ffb3f657c912a","ssdeep":"768:y5xUZcBYK3DrLUQ8hMe8H0csd8qMtezL841LiizdJcP/lunJRIHL1qE:WBwT69UPOlo7yt0nO5H","tlshash":"a7b3629104070501a29b5cd133ce7e28ee1ea161b140d178abfd5babefdbd62226e35d","first_seen":"2026-02-21T20:18:35.602802Z","last_seen":"2026-02-22T14:49:37.726037Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19011\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"hello-frontend.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"c3a42add7ea0548d7667b16521c09f21\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zl8rq-1771768278059-3d5d75786a4b\r\ncontent-length: 569\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1846,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1846), with no line terminators","md5":"a1e87433534214c42bc5e80a6d96f9f9","sha1":"56269ee46b410ad42b3dc1281ff85ec0b5d6bba1","sha256":"d09012005a283292d543b53dd988d15275c61904c97ebc45de2110b3d2f7d9e1","sha512":"01e58eafae7f22a4714814e5bb4d9472358eacfbf7e04c9d7a0a46e90ed0bf064f1ad1378055927d556f7c9ed5ecfa3e5a4c6cd4e08bb38a15fb58e3c64c3c69","ssdeep":"","tlshash":"f3316a66724a5d3a045ec2b72b4b6aafb26695cf9441847c7039fecf0560dd123e23b3","first_seen":"2025-06-08T21:36:43.872332Z","last_seen":"2026-04-22T18:31:40.826364Z","times_seen":11684,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.4","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.4 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"theme.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"27758fcf4d55be5c34a04204287de156\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7swd6-1771768278036-94ace8b0145b\r\ncontent-length: 1353\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5097,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (5092)","md5":"a480d2bf8c523da1c15b272e519f33f2","sha1":"385993a72c83ebbf0e0db1ed05112d35bfdaf22b","sha256":"9a7cfe03ec7638180859c5cd93ed18a75c0b4519c01849e2b6b2e2c90a0dea2f","sha512":"ef9f08c2afde47cd53f433079b3bd85c66d5a4f1049f75e472e8f03c5b410854e5d4e98727f5cb56ef8a96d2f9f7a9adcb192203ed1c4677840beb92ae5da05e","ssdeep":"96:yE4yyDOT58u6gYRbFdYrZGu3bcgcMNn7MNluMNITMNd0MN77MNbKz:y4yDhgGbMrM6cgjMB","tlshash":"15b1643ef8d1307c293b9b02bac5ab8d646c872ad35309e8db998b59819e750781334d","first_seen":"2025-06-08T21:36:43.869263Z","last_seen":"2026-04-22T19:36:44.909983Z","times_seen":29837,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.31.3","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.31.3 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"widget-image.min.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"e8024e9f1401b97ac66efe783d516724\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::x5b8p-1771768278041-218cb5e3cf20\r\ncontent-length: 254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":254,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e8024e9f1401b97ac66efe783d516724","sha1":"f23943eaa45e48267b7c056f738b2df4406b97ae","sha256":"7fef4d6f15bfcc6854dd3b24ca77cb1ca77f184e1227e5318261e1f6f2c37b34","sha512":"f5da89ec17de6e3ae4812224f70cfd340216893176d15eae568966bb7b48eee519cd4886a72e813d5f9a4fe13caefa014ad9f81533ab72a0fd4223cfcc303ae3","ssdeep":"","tlshash":"bcd05e4079678382301f596d26ab2a9e38c01ddde246cb90eca166125abacc833b2120","first_seen":"2025-08-27T19:39:42.920092Z","last_seen":"2026-04-22T06:57:34.802897Z","times_seen":2573,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1752514732","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1752514732 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"robotoslab.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"4d91aa7cfb974b95739c3f22a5ea8089\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::72nx2-1771768278046-7517ac11ec67\r\ncontent-length: 799\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":26649,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"99d93e141869629987d5e858f7cf673e","sha1":"eee5f628fda51136a3a267fcf0633307d2396e4a","sha256":"ccdf35fde31161856fcd8dc413cd9bf7aa81da4044dcfaa96559b369d1c729ed","sha512":"bd07248c5bccb869c8a1e332ada863db3e370a9afbe50776bada96c0366be1cd8839129afac567151974fff9492be5c1350d5de0d3632c0823f0c454093f27ca","ssdeep":"768:bRPRDRyRoRkRRR6uSjZ14rPjSYU5IkAh7/qJFhAKebOamH1Z0vLHmUYVcAkF3T28:lpd8eKf6uSjZ14rPjSYU5IkAh7/qJFhG","tlshash":"3fc21180584a0901e7974cc173ca7f15990e6095f081d5ed5ffe28e8aeebe23336679e","first_seen":"2026-02-21T20:18:35.613906Z","last_seen":"2026-02-22T14:49:37.704703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3542\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 21 Feb 2027 20:18:09 GMT\r\nlast-modified: Thu, 15 Feb 2024 16:53:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 63188\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=beIo3tYnp9mA54VhkhbKR823LYN4af1R%2BWjHRmMHtkBlHiXfov23gXoOS3UdbmIHXcnQ%2BuPYBB0nrWgThX2ZeUuvRF8zKgaYHfLv3g%3D%3D\"}]}\r\ncf-ray: 9d1ef51a4d681243-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9141,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-04-22T20:11:13.817742Z","times_seen":241473,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":15,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.31.2","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.31.2 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19007\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"elements-handlers.min.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"687ea5f9517b694f9ce880bcbdcc0035\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vp775-1771768278075-0d67e294ec7c\r\ncontent-length: 11284\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44670,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44626)","md5":"4b1e4ea934ae31a60c0b66ad172f0980","sha1":"59e3a242b9dc383309a234e99fb4f53320cc48ba","sha256":"53880e82fb33ea08b7ff2de3b200a72f64ee035a76c7254045dc82ab04da067e","sha512":"723905055c0e80739f474b72a2d347996bb453f5cf8c75f6fb118c9034e2dd1670558e4ee3e68afbc7d5b8aabfd634098b6bf0662bbb115d1690597be83cbf14","ssdeep":"768:W/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFg7y:Yt5D1+WE9A5yLcWJ9mBtIoERuWfRMBKr","tlshash":"5513a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","first_seen":"2025-08-10T22:50:09.603161Z","last_seen":"2026-04-22T16:59:39.380646Z","times_seen":4895,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/2025/08/okx.svg","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/okx.svg HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19007\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"okx.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"59bbe09c3fa398694fe3ba983e644c85\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ggsgz-1771768278481-e3498c5fb0cf\r\ncontent-length: 1178\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3502,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59bbe09c3fa398694fe3ba983e644c85","sha1":"4f9228f0dc4b8c69578dd343987820184f8391ac","sha256":"58fbbb05559c12f9a7129af376c1702e5ea410f3b656fd0f78a869ca6297d409","sha512":"c28fb777e2b670d38a5b864198ce46d2be39bc767f28709b5e9ef6f60e654177a585576d8dc19bb172f787390f7da6723ee822e7e8b7afece2ca44c0ef82162b","ssdeep":"","tlshash":"6071fed0128de6d093999ffc155bf13635f618fe6cf94019018f2adaec121af9468ed2","first_seen":"2026-02-21T20:18:35.641562Z","last_seen":"2026-02-22T14:49:37.684285Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/1f6a8.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/1f6a8.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 19 May 2025 11:40:53 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1108,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b56e4108808ff9e886c75a135ccdb784","sha1":"6e0b4fb5fc4b151408d021fe25d75b8545fcde23","sha256":"5ed681717a4679f291aa6076a88951cc5dea77f2e85ad52009f35c9eca5662e0","sha512":"d87fed3461451963fcc0bebd2ee1d0f9ee069717a19a70412edf27c06e002be6ff81d4b244d1d8a40e3015ea65def24510697eb97a52f403da364ece313b0bac","ssdeep":"","tlshash":"ab11ad4c237d53c7e4c6da4d8fa0a9a055e8f0dcc8b84de46bcd861d9096d8fb974920","first_seen":"2023-04-15T18:40:12Z","last_seen":"2026-04-22T16:53:02.367162Z","times_seen":878,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":217,"dns":3,"connect":8,"send":0,"wait":8,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/elementor/css/post-6.css?ver=1756354683","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1756354683 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"post-6.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"b107905a42fa13ad86813369042b4ea7\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4cdfn-1771768278039-c304a89b1b8c\r\ncontent-length: 497\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1462,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1462), with no line terminators","md5":"f9fee3d46d2871e6f86e27307c9b7ad3","sha1":"8ee1d6beb74679f599b8a9fd82ff5f61a1466dfb","sha256":"ed0c15f137c70d19ac41376f01b394cb8607e7052b2e7de53bdc60313ee3e4d8","sha512":"eb81ba2ad9c23b4d1521743bc5cf510afb1331c9a8b85aca53f7a06c2b60aa170e55a94affb7a4bde8c63e9da04932990efb232e26507f9d42b177f53d369316","ssdeep":"","tlshash":"d0315745be23e026e07b062fd6c3b42c001cc45f915f8edbf42d8349f9bea462269647","first_seen":"2026-02-21T20:18:35.629411Z","last_seen":"2026-02-22T14:49:37.708768Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.31.3","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.31.3 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19010\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"frontend.min.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"78aeb286baf345921175114504abc021\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vp775-1771768278064-79896da8ff40\r\ncontent-length: 11339\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32879,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32839)","md5":"7e45d32ffed6a9784f996f5ee7cbc81d","sha1":"5625c25cfe6a2adb56654ce0a462cbb36553f3e0","sha256":"294f58bed97fc37c901a7684ed71f664088af386ff1fbbd74d28a85cb820a23c","sha512":"e1a90133303dae20802f21aacdf2498179378be745f330a25f16646a0e6c288ec7a9e0f041107ffc14743840a7060d942e334d23ee0574bd4cfdb51bdda43f5c","ssdeep":"768:hB1cI21AHgRdpM4ZfghzDbuDFX6zzyCMt5R8RjDKv//DtZ1XkLVgbpMGMpKEnzBb:tcNRdpMMfghjsFSmt5R8RjD8/uLVlqEB","tlshash":"0de209527296e4a2069f48a3f0331119f3769dd9b80af095b1bcdce5a471f877362b34","first_seen":"2025-08-27T14:48:45.381225Z","last_seen":"2026-04-22T17:35:55.295798Z","times_seen":3246,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/Coin.png","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /Coin.png HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19007\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Coin.png\"\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"99e3234f915ae66cdd512ea6fed9146f\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gj5n4-1771768278479-fde9321dd4b6\r\ncontent-length: 316633\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":316633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 720, 8-bit/color RGBA, non-interlaced","md5":"99e3234f915ae66cdd512ea6fed9146f","sha1":"5d4317e934f554456e5a0cea2f119d5180465fb5","sha256":"33be3ae1a960b022235889c2dccdeb63e9dff2603a0505b1286be0788f27f6eb","sha512":"1a2c9432b02d42b98c825963145c64afcfae3cf59e5d3c99503337858a7bc3b967fa6e7d0fccda416bdf2854d71af6bb0d49542f301cac62b065b0764477edda","ssdeep":"6144:5sJQk6dzMCzA4TumZudxHAufl+MweC/6llb70oBlav2l5Il4oNjK:aQo/4JuP7dDweCcW5g","tlshash":"346423c77bd881eae4b884352e4e9e7fe91af962741ccd301c6ecc9647f950e4611781","first_seen":"2026-02-21T20:18:35.616197Z","last_seen":"2026-02-22T14:49:37.703028Z","times_seen":4,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfionerc.fun/","fqdn":"wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-22T13:51:17.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 23:48:50 GMT","end":"Thu, 02 Apr 2026 23:48:49 GMT"},"fingerprint":{"sha1":"12:8E:08:DA:D8:FA:F0:DF:F1:73:35:07:BF:DE:A9:DB:6A:6D:C4:A7","sha256":"2D:BC:80:AF:6F:4E:F4:B3:4F:9C:99:07:6D:49:11:30:FD:27:1E:CB:B7:83:EE:73:AE:F6:E0:C7:AE:36:AD:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 22 Feb 2026 13:51:17 GMT\r\nlocation: https://www.wlfionerc.fun/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::b7dfh-1771768277521-155e762a9696\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115942,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":72,"dns":43,"connect":1,"send":0,"wait":10,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/2025/08/image-1.png","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/image-1.png HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19007\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"image-1.png\"\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"276bcc44dd9e54ca466b7a3c602b0093\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ggsgz-1771768278487-d07f90257ff2\r\ncontent-length: 29476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"276bcc44dd9e54ca466b7a3c602b0093","sha1":"1654e54cfc5aa5dd09d46f34692bd1467482d0ff","sha256":"3979f2a4b9adb9e1d562357debff17a02fd06072867a2275e5e04fdbeec70050","sha512":"b81e000412c03c9217d6b592f3fdfded834b0785c9292c6233c1f96b93a74de1e6ca02c168dea0263ba244e5af1ad288a857112c73b750be679365c2d1ee01c9","ssdeep":"768:EoIN7VBJ2whJbQHdB4+BtEoxLVP8YO6lI:QT0kJuf4+/EYVHI","tlshash":"c9d2e0dba3cf0cd1c11816925bad55c24bcfb5b9ba0426bf08cf8b66d8aa2147dd3350","first_seen":"2026-02-21T20:18:35.607881Z","last_seen":"2026-02-22T14:49:37.712006Z","times_seen":4,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://babywlfi.vip/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding,User-Agent\r\nx-litespeed-cache: hit\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kPa2ae0C%2B9vyXhJrpoqqxFrF%2F24ODQSJSCGNO8Ir1Rm4oSKekW4HbIxveptBnWDrgb9dr7mV8AQOEzQ2m%2FssQwMkn6kCtDzEjdJGxQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9d1ef51e8d54c8c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"babywlfi.vip/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"babywlfi.vip","domain":"babywlfi.vip","tld":"vip"},"ip":{"addr":"104.21.63.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babywlfi.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:31:39 GMT","end":"Sat, 16 May 2026 07:30:10 GMT"},"fingerprint":{"sha1":"F5:06:FF:0C:CB:A0:BB:B5:D2:AF:9A:37:B3:DD:AE:C5:D2:93:D7:67","sha256":"4B:7B:4B:7A:EC:B0:47:9C:82:64:31:35:08:7C:44:49:A5:FD:0F:1A:0B:79:D9:F1:9F:AC:59:38:2A:39:16:4F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js HTTP/1.1\r\nHost: babywlfi.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://babywlfi.vip/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding,User-Agent\r\nx-litespeed-cache: hit\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AHxOpfzHpp4yMf9vpqNEQgJHQTm02fsIFfZPUCaiKZA0Rr2hN0kfqoTzKKNbDSUrRLAeWFU9QBzILhmle9%2BAspvPubXR%2FNyXst477g%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9d1ef51f3d77c8c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"babywlfi.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/2025/08/bybit.svg","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/bybit.svg HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19007\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bybit.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"bbb72920f664602a38a56605ebd644b7\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zws6h-1771768278484-f403060f7d13\r\ncontent-length: 619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bbb72920f664602a38a56605ebd644b7","sha1":"b83f0accaa67e31dd0d261640f5c652a81cb0e1d","sha256":"5a1ad8e31446c512ca1a1d6ea3423e86fcca53d1596deeeeaef4166e4dbb3b56","sha512":"81fb973d5a58c28c48014a6511f7f8a7c7dcb203a3f49fea121be16f3a69e0dac899cf3cf82e252c142a6acc297ab57006ee6b2d5b07f13112a84b1ea77f9072","ssdeep":"","tlshash":"063110b29342e160460547e1cbb67073669636ed3e66d11c4bd28f60b9546cdec889e4","first_seen":"2026-02-21T20:18:35.642685Z","last_seen":"2026-02-22T14:49:37.689476Z","times_seen":4,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fa-solid-900.woff2","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fa-solid-900.woff2 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fontawesome-all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19007\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fa-solid-900.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"6c4eee562650e53cee32496bdfbe534b\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4cdfn-1771768278580-a61ef9de23bd\r\ncontent-length: 156496\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-04-22T20:12:12.125794Z","times_seen":35551,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fontawesome-all.min.css","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/unlimited-elements-for-elementor/assets_libraries/font-awesome6/fontawesome-all.min.css HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fontawesome-all.min.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"51786e190b1ea3fe846bcfb87d24dd52\"\r\nlast-modified: Sun, 22 Feb 2026 13:51:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mks7b-1771768278050-e37853d34bd2\r\ncontent-length: 24307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104100,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65314)","md5":"8be3c848e72f99aeab79c76db6979c9e","sha1":"7aa7dc0ba41e1a1cab7d6b835375bf1c3228742e","sha256":"c094cf927423e28e616dc3c2313f8cf1ca02809bb7a0646fbb0503eaf72cd484","sha512":"41456d9ac069542cb2408c31548ef504c3b8f3c91f19f5444b11fe4bdaf01c7947f2ddb5f3fb60f32085d36d120ffb79bb4742dc46a060cf6781e406a61c62a8","ssdeep":"1536:ipMEMkMkM1M5MYMAMzMKMoMRsVMRJP3b/i9F1EXSdQpgSLCRM:MJP3GEXSdQiSLCm","tlshash":"86a3b4e4d48d15d9f732c44faf99b37861b6f738d5810ca9f02f590c0ad2aa425c6b3a","first_seen":"2024-03-12T06:56:37Z","last_seen":"2026-04-22T17:12:10.37003Z","times_seen":1355,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.wlfionerc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d1ef51a3cea5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-22T20:09:40.911778Z","times_seen":333345,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":62,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/2025/08/uniswap.svg","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/uniswap.svg HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19007\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"uniswap.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"58a7374bf314fd5d644f3c0c19cfe4e3\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7swd6-1771768278480-dd6bf12c7b6f\r\ncontent-length: 3730\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8270,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58a7374bf314fd5d644f3c0c19cfe4e3","sha1":"1900f89c23d7b1936516271830eb9630b656e133","sha256":"26f4be45a8a1cc97528d58440a80bfcaa4addfa87b1a7d060ca36918d95d835e","sha512":"49329f6721199ce8b85832d040bebcc18ec4ccfd098f8f45d69b782cbacae24e75fae9020ce287ef1151913ba5375c05bde0521ab7f7cbc88b24aa0a5a063633","ssdeep":"192:rjNk/pDzEq8EMwrNpj+hOp/0UqNyFQqS8ORklTmHCNpy:PNkhzEqtLPNmQUklTCCNpy","tlshash":"f402a6e5b3b8e2e8f142e7f8c623a8313aa62cf97b11c94d83e11c91c26516d5c95c83","first_seen":"2026-02-21T20:18:35.65516Z","last_seen":"2026-02-22T14:49:37.707996Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor/assets/css/widget-image-box.min.css?ver=3.31.3","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image-box.min.css?ver=3.31.3 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"widget-image-box.min.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"ab5e179d1b643b37ea2bb3da751d17b0\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mks7b-1771768278043-6cc3c3060ada\r\ncontent-length: 384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1454)","md5":"447a7c0a4e493eeeb3973baa51325430","sha1":"db0aaeab9c9ae1a8830c9499bd11cd186f7ec310","sha256":"436ce9266aa4a83668f949eb8bcdf5748ffd7a0a95356a2bfdec441d2abbd78c","sha512":"193abbb9de78f35140b98d3dc54a1707c63c0102b63b0dcf1817a27d79ad6b3de66c6995f49c9505c140a186be8b7fc098b0a34d27a1193ba85272f6b2ac3641","ssdeep":"","tlshash":"863121c13c5b5447642f5b1f346f248d64a24cc8eb92e796e992a20706f9de53732c1e","first_seen":"2025-08-29T00:25:07.38614Z","last_seen":"2026-04-20T06:02:19.029676Z","times_seen":313,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/elementor/css/post-8.css?ver=1756354683","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-8.css?ver=1756354683 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"post-8.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"c0962ca4059ae0722114de895fc9f647\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jp9km-1771768278045-84acb6285e0f\r\ncontent-length: 158\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"c0962ca4059ae0722114de895fc9f647","sha1":"c64e2d53388805929ec4b5a6a13ade0961fd29b1","sha256":"ccd0d983c2787aef41c15947153e7a6361af7e133011ee4570483fe2544a1d60","sha512":"93bc05f6053413ebcfd2f201465c89d72928e3c33b719be6a06a8df5266ad1ffe0530fb2c62d2bc839b451813d889f3519627e934198effae7327d208e806db0","ssdeep":"","tlshash":"f3c080b67d5b17e00377c50355022f18812264e5c00329f4fc4dd14904e650e3641e15","first_seen":"2024-12-19T13:11:13.23991Z","last_seen":"2026-04-20T08:32:21.745755Z","times_seen":1178,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/2025/08/UFuWgdxn_400x400.jpg","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/UFuWgdxn_400x400.jpg HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19007\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"UFuWgdxn_400x400.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"d1a518d5ba0bf446b30d3e4ff3eb30e6\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::72nx2-1771768278486-8dd6c06e1487\r\ncontent-length: 8357\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8357,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"d1a518d5ba0bf446b30d3e4ff3eb30e6","sha1":"1ec952185375637d8cfcfa00759ee048d1a951cb","sha256":"708f9965d6195825527264994305bbbcdf3508486babcec357634c5060923f1b","sha512":"ac68c591ea4d6b0dfa4c4429c9e54c7f60440632d9664a0d83da88bde357b1e5dd3a28786dd39af45710dc5003d6c7335ab69b1ad394d0dea69ac4fb78b1b816","ssdeep":"96:X894vsZ6Pj491XIxlzFaySALetHCxLwQ4Y+bD7woKKKKKKKKKKKKKKKKKKKKKKK4:smjk1kN0yBytiZ4T7a9IIaV1lciLRH","tlshash":"3f027dbfb74e1508da3d09f706189700fe787e09069f639790a120abb7758e6856c5e3","first_seen":"2025-02-21T08:08:32.737306Z","last_seen":"2026-02-22T14:49:37.720989Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.31.3","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.31.3 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"frontend.min.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"0eb885e1884ab4e8cebcbc95aa859ff1\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::njn4v-1771768278038-7a6a1e7c8e5c\r\ncontent-length: 8243\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62845,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a540fec99fada183eb5c0da90766da11","sha1":"eab790deb49de7037a21ca5105dceceeb127fbdd","sha256":"8f5c8c7a19dabc2c370203afb5ab9b0a58a1267b38e5a20637c1662fc1f90852","sha512":"23e4e5aa9b8dbd74c8ad7e649783ff11e345693643c13e11dc8ba90f624c944df055b8f1070a4c91f7a821796c4567faaed4bf1033142aa476debf90a1b6f03b","ssdeep":"384:SdLlnlnGCQG+q0CVSiGwzmjxe9WR123M0/1SG5mBkOmBkxF5fLxFXOw1FRKxFPxP:IBnpZbB4T1jDF5fLxFJ1FRKxFPxF0F5w","tlshash":"1b53de623db32254313fea2fb19b220c2254c0cad61efd95f58081939ff9d953b71a96","first_seen":"2026-02-22T13:51:45.209667Z","last_seen":"2026-02-22T14:49:37.713251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wlfionerc.fun/wp-content/uploads/elementor/css/post-20.css?ver=1756354786","fqdn":"www.wlfionerc.fun","domain":"wlfionerc.fun","tld":"fun"},"ip":{"addr":"76.76.21.164","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.wlfionerc.fun/","date":"2026-02-22T13:51:18.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wlfionerc.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 12:51:22 GMT","end":"Fri, 03 Apr 2026 12:51:21 GMT"},"fingerprint":{"sha1":"AE:9A:B9:9D:F5:DB:D9:FB:0F:12:50:8B:6B:4B:C0:6A:90:11:08:C2","sha256":"A3:E5:A5:28:6A:7D:63:25:95:64:1B:70:49:44:79:09:3E:DB:72:A8:E1:A4:39:F0:E4:8F:7D:E7:38:9D:D6:89"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-20.css?ver=1756354786 HTTP/1.1\r\nHost: www.wlfionerc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wlfionerc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19012\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"post-20.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 22 Feb 2026 13:51:18 GMT\r\netag: \"1c31a5d19c56205ab33d214c913b9532\"\r\nlast-modified: Sun, 22 Feb 2026 08:34:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::925cc-1771768278043-973510eb8366\r\ncontent-length: 4407\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48944,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (30237)","md5":"79c153ac65b478005fa55c3ffcfe068f","sha1":"ba7dcef8cb7b870ca6a82339cea080075213999c","sha256":"270c9643713d8c24c4e609313fbc9788134ebe6de028863eb51b3c72bc010ec7","sha512":"1206f402cfc3edf5eceedd2c066af0e2f09ae25f384f3f9208fbb8ccd6e080f75e75200b9f19892157abeaab649e1c4300050bbf277902d2f27dd8520dd6b36c","ssdeep":"768:uSCNlypd7XdB2PvDBQLKIVSIFm9O/K5btpEEl4I0IRI3VPP3Ze7YK6PFPePvFwtd:Nd7XdBEDBQLKIVSIr/K5bV72FXpe7YKE","tlshash":"ca2325723d83922d793f145f2017ba9c35a44cc9d66eb6c6fa61602bf0fad913790b18","first_seen":"2026-02-22T13:51:45.212212Z","last_seen":"2026-02-22T14:49:37.681049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"www.wlfionerc.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}